actually, it's a username and not a userid.  This matters because of the SRP protocol.