delete HTTP_USER parameter (closes #3512)
correct notice (refs #3410)