Handle User.DoesNotExist

If the entered PIN is correct, but the configured user doesn't exist, still return a 401 instead of a 500.