Liberal authenticate() parameters.

Allow for 'username' explicitly in the authenticate() method. Some authenticators (like tastypie's BasicAuthentication) hardcode a 'username' parameter.

Includes a test.