Error messages differ for existant and non-existant user account.
vulners.com/securityvulns/securityvulns:doc:10079