login enumeration [security]

[marado]

Currently, we behave differently if a username entry belongs to an existing user or not. This allows for login enumeration, and figure out all the usernames registered in the talker, which is information we might prefer not to leak.

A possible solution is to adapt the approach of many mu*s that say "tell me your name, or 'create' to create a new account."