update webservices to require a username when validating requests, added $core_config['webservices_username'] option, default is TRUE