basic spec for GET /message_door
username links to production, not staging