Option to prevent automatic user creation
There are some instances where you don't want a user to be automatically created, for instance, accounts are provisioned by another source.
Implement a way of only allowing authentication for already existing users.