[Security] Return null instead of empty username to fix deprecation notice#59640