username in urls are more secure and more convenient
control username format support in URLs