username is more robust now - everything to lowercase and spaces avoided