Allow HTTP auth pass-though

Allow HTTP auth pass-through. Useful where you have a paranoid systems admin who only trusts HTTP auth to protect the site. Removes the logout link if the user authenticated with HTTP auth.

Also fixes what I presume was a minor oversight where "Howdy, username" was displayed instead of the users full name.