backends/tunnel: add username support in connection string