As of 3.1 of Kohana Security::xss_clean was removed so this causes a bug in the useradmin/user class login method when passing a username in the url.
The specific code is
$view->set('username', Security::xss_clean($_GET['username']));
}
Shadowhand has a Purifier module that can be used to add similar functionality back. https://github.com/shadowhand/purifier