Firefox 26 actually sets target.username to empty string, improved logging