i'm using the build-in user management from hudson. Every user can do everything
when he is logged in. If somebody enters a username that does not exists the
login fails as expected. However this user gets added on the user list an can
only be deleted by restarting hudson (so i'm guessing hudson holds him in the
memory)