validate user instead of username

Change-Id: Ic212630b39b2cdfdebff60682c3bc9773a92c870