whoami: Don't crash if we don't have a username

The 'credentials' var will always be truthy, because there's
always *some* registry URI.

See also npm/npmconf#40