if username not found, reject the httpresponse