The variable REMOTE_USER needs to be implemented inside libModSecurity. More information about this variable can be found at ModSecurity reference manual: https://github.com/SpiderLabs/ModSecurity/wiki/Reference-Manual