htsp: ensure that NULL isn't passed as usernmae to access routines