can login even if "username" in xml-file is empty
some bug fixes