s4-net: allow a username to be displayed in setpassword errors