rest: read username from kerberos
rest: assert invalid auth setups