Make user lookups work by username

Also sanitizes the usernames better to prevent NaN queries