Various fixes to header and auth. Default username assigned on user create.