with a bit of lame protection against abuse.
Extend plugin auth api to support up to 512 bytes in the user names. Use the API versioning to support old auth plugins too!