authentication/username passed to all server side subroutines

fixes #139