Initial attempt at safer way to show username in welcome message. May deprecate forcingAuthentication on the client side.