fixes #3
adds `{%= _.username() %}` mixin to extract the username or org from package.json urls