changed authentication to be based on username which must be unique instead of name.