Fixed #1175. Rename :user param to :username

Also protected login & reg post under feature flag
Fixed #1123. CodeCasting works with infocard off
3.11.20