bread-and-pepper/django-userena — pull request #181 by ghinch (2012-04-15 02:06:11+00:00)
Title: Remove 'username' param from URLs with keys

It seems like something of a lapse in the security/anonymity provided by using SHA1 keys for user activation and email confirmation changes to have the "username" directly in the URL, and really there's no reason to have it since the lookup can be done on the key anyway.