changed username to session variable