Bugfix: fail when authenticator_id is not set. self.username, not user.username.