only check user when username is supplied during submission