this line can be delete since you're not using `username` in any of the assertions