Don’t just copy/paste code without understanding what is going on. By settings cwmp.auth to the value you have above, you are telling GenieACS that only CPEs that connect with a username of username and password of password are permitted to connect. What you probably really want is something like this:
AUTH(username, password) OR AUTH("usernameSetOnTheCpe", "passwordSetOnTheCpe")
This will allow GenieACS to try to auth the CPE using the value stored in the ConnectionRequestUsername/Password parameters for the CPE or try to auth with a username/password you have set on the CPE.