Insulating user login from external dependency shocks