User's CN is always set equal to username

There's no reason to make them different and this way it simplifies things (for example EasyRSA names certificate files by CN, but we usually identify user by its username).