Token validation for other user doesn't work

[rgooch]

When an admin registers a U2F token for a user (by visiting the profile page for that user), an attempt to verify the token for that user does not work as expected. Instead, token verification for the signed in user (the admin) is performed.

The verification operation should specify the username corresponding to the profile page that is being viewed.