If a user has never logged in, their 'last login' time is that of their account creation, which is misleading. If there is no way to distinguish users who have never logged in, we could at least highlight ones where this may be the case (i.e. where the timestamps match exactly).