fix for resolve_user w/ invalid credentials

this affects the dbclient only in cases when a user is attempting
to access geoserver and provides invalid credentials. the result
was that they appeared to successfully authenticate but only as
an anonymous user