don't require a username, extract it from the json
adjust flash error message