Separated out the login authentication check as there will not be a
password for an unknown user.