My gut feeling is. remove username from the parameter list and make request mandatory.

If we later find the need for a specific username parameter, then we add it back like this:

```
self.username = request.META.get('REMOTE_USER', 'anonymous') or username
```