changed auth.username to auth.username()