Prevented user from spoofing username, added test