reject unless a username is set
improve user html
set the user correctly this time