saslserv/ecdsa-nist256p-challenge: use p->username instead of local var