First shot at fixing a potential security vulnerability

If someone tried to login as a user that didn’t exist, the site would
have an unhandled exception