Avoid injections.

I don't think anything bad could happen here, but just in case, prevent GET /users/my_authed_name/somethingevil.