error and text for user vs. username in auth hash
raise userconfigurationerror if provided username
make authentication configuration spec more picky about which error
Fix entry in authentication hash
fix spec names to be more idiomatic
make yes-security error expectations more explicit