reject users when not found in directory