Field name is 'username' not 'user'