login: avoid php notice on missing user