login with wrong username now takes same time as with existing username