re-work username handling between client / server

[trentspi]

• Avoid using a cookie to store username data
• Validate users more appropriately
• Implement error handling to avoid faults in validation
• rework front-end "first-name" hello label on the navbar (name not updated on post-secondary login)