Change the contract of Connection: `authenticated` boolean field is
dropped, `username` is introduced instead. If the connection is not
authenticated, `username` will be null.