FIX: not cloning username arg in http command