We didn't end up using the username from JupyterHub's Auth,
as it didn't add value but did add a corner case if the gitlab
authorization came back for a different user (such as if the user's
browser had logged into a different gitlab account in the meantime).
debug-gitlab was populating an empty username for consistency, but it
doesn't need to do that now.