set inititor to WEB_USER for login attempts to non-existing users
add "anonymous user" + ip number to header output

this makes the look and feel more consistent