Assume username, not barcode, in TPAC login