/recommendation endpoint requires localstorage to match username paramter in url

prior to this change, users could login and then navigate to anyone's recommendation page by manually
entering the url into the browser