This filter extracts the username from the Auth 1.1 and Auth 2.0 contract to enable rate limiting based on who is trying to authenticate.