authenticated user name in header