apiserver/admin: Restrict user logins

Any user login will fail unless that user exists in the environment.
This should be:
` return nil, errors.Wrap(err, common.ErrBadCreds)`