Username no longer passed in plaintext