Changed login form not to use user.username, as this causes the gravatar to be fetched even if user hasn't logged in yet