username and email request for lti module

added username and email functionality, so that username and email can be passed to the lti third party app
This shows up if the 3rd party app just doesn't ask for anything? It seems a bit redundant to tell the student that we are definitely keeping their data secure.