thanks for the review, Dave.

I think usernames are nicer, too, but unfortunately I was just echoing the implementation already in many places in the `external_auth` and `student` apps, which log `user.id`, so I don't think I can change it here.