remote-user auth plugin: Rely on 'user_action_log_identity_id' for username when trusted header is missing until BZ 1086910 is fixed

[merge]