using new api for superuser

I'm wondering if it's even worth having a separate field for the superuserId if we need to convert the username to a user id on the server; we can just have one parameter (maybe change it to `username`?) for both.