hoodie.account.username should not be set for anonymous accounts

Today, we have this 

```js
hoodie.account.anonymousSignUp().then(function() {
  alert(hoodie.account.username) // alerts something like abc4567
})
```

This is confusing. It's technically correct, and we need to store the username towards the backend somewhere, but we should not expose it in our API.