Generate error if no username specified instead of letting Shiro blow up