Use username as authentication key
Use username in URI instead of user id