Fix User attr_accessible username but