auth_cvm: added check for null char in username

see issue #53