[Fixes #56164146] Ensure responses for valid and invalid user prevents user enumeration