Trust $_SERVER['PHP_AUTH_USER'] for the username

While this variable isn't always available - nor can we trust it in some cases - we can proxy this from another layer - such as nginx/apache - or even wrap our slim app with another application to handle authentication.