use current user if no username is provided in URL