Move authorization code around a bit.

Signed-off-by: Sam Phippen <samphippen@googlemail.com>
Fix #37: Expose actual usernames.

They now show bracketed in the user listing, and as part of the title
when editing a user.

Change-Id: Id5d64e662c02cb2bb636943db9abc18abde2b70c