I don't know what kind of restrictions GitHub has on their user IDs, but do these need to be escaped? We don't want evil stuff to sneak in.