Security Issues

Stop Url hacking;
make user.Username unique;
add standard in-memory test base class.