[FIX] prevent to save username when it's not allowed from configuration