only perform authenticated requests, if username is set