Be more strict on user removal checking array id and also username to avoid removing wrong users when browser back button is used. It should fix #3856