How about asserting that user cannot be found as well?