auth: added username in the session.