changed add_user back to taking username from user, rather than try to calculate it. considering whether to move all username generation to auth-utils.