Use :username instead of :id and :login for user identification