Parameterise username in APP_ROOT

trivial improvement, but might save some headaches.