app.py now uses stored username rather than needing it to be passed through js