I was pointing to this here:
I think that error message explaining which username was not found would be sufficient.