When logining with an account that doesn't exist, it returns 500

[bis-code]

body

{
password: "asdsadasdasd"
userName: "aasdadasda"
}

when calling api http://localhost:8080/user/login