session: ignore non-string username attribute upon restore