add withOptUsernameAuth to Secured