In reply to speedyk.

People know this, but we don't care. Since usernames are not intended to be secret, they should never be used for authentication purposes.