Ensure that the username is non-empty

Without this, a user may use an empty username to access a UUID where
the server cannot read the configuration file.