Use $user->getLocalUserId() in controller so we always get the
"friendly" account name (not the pennId hash)