don't use username in access control autocomplete

fixes #161