Working on auth, currently pass username as querystring param to addCard, updated Postman defs