GUAC-907: Log source address, using X-Forwarded-For if available (after validation).
GUAC-434: Allow SimpleUserContext/SimpleAuthenticationProvider to provide actual usernames.