username is *always* undefined (it doesn't exist)