If a user is logged in than you can log in with an unexisting user. The user won't be registered in the system but no security exception is thrown. If you log out than this behavior don't happen.
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira