username fulfills the same purpose here as it does in the XCALL parameter list, and is used only if the auth parameter is specified, and the USERNAME is blank or not specified in the XCALL.