moving into pulling username from session, no more hardcoding in URL