I think that rather than adding the id to the params, we should instead require that usernames be unique.