change to sessionStorage, clear username on logout
send username to ajax.cgi on annotation create/delete