normalized username in http_login