bug fixed: UserDatabase::verify will handle NullPointerException