The username as verified and optionally changed by the user. Will only be used in confirmation mode, when called without user authentication.