url should include the username