COOK-3269: pull user list from users cookbook

also sets the X-Forwarded-User header per https://wiki.jenkins-ci.org/display/JENKINS/Reverse+Proxy+Auth+Plugin