make references

super ultra tiny thing, but I think `user_name` is better as is in Auth.login method.