add username; auth feature test passes, need to refactor