subdomain usernames show only items from that user

closes #54
needs more testing, and cookies need to change