Only allow drawer to draw on the canvas

Also change attribute nickname in user to username