Naively mixed up username and profile.user.username in a couple of places.  That's fixed now.  Also, wasn't checking for null lengths on contacts and websites, causing users to be unable to get a pid.  Now corrected.