user_api: get username into user object

so it can be used to generate unsubscribe tokens

@kevinchugh @ormsbee