Fixed invalid credential handling.

src/users.js

@@ -46,14 +46,14 @@ export async function fetchUser(userId, options = {}) {
 		.groupBy('users.id', 'users_roles.role')
 		.first();
 
+	if (!user) {
+		throw new HttpError(`User '${userId}' not found`, 404);
+	}
+
 	const stashes = await knex('stashes')
 		.where('user_id', user.id)
 		.leftJoin('stashes_meta', 'stashes_meta.stash_id', 'stashes.id');
 
-	if (!user) {
-		throw HttpError(`User '${userId}' not found`, 404);
-	}
-
 	if (options.raw) {
 		return { user, stashes };
 	}