fix empty username allowed in user manage