[webui] Only overwrite @displayed_user with valid users. Fixes #421