hashed username only; will let us tell if people are using multiple machines at once

This finishes #4.