fix(api): don't leak whether user is inactive or inexistent, closes #79
fix(api): don't leak whether user is inactive or inexistent, closes #79

I investigated whether User.is_active is useful for us. It's not really,
but it's not worth removing this default piece of Django functionality.
Also, it may come in handy in the future.
https://docs.djangoproject.com/en/2.1/ref/contrib/auth/#django.contrib.auth.models.User.is_active

desec-io/desec-stack,desec-io/desec-stack,desec-io/desec-stack,desec-io/desec-stack