The existence of the user is checked in the UserExistsValidator, the problem arises if anyone disables it, have you any suggestion on how to make it mandatory?