fix(auth): use X-Forwarded-User header to populate username response

fix(auth): use X-Forwarded-User header to populate username response #763