Change :username to :user, to comply with JDBC