added GET /api/user/username/:username