does not login for users that do not exist