cannot switch user when username contains an @ or several other characters

We pre-auth with the user "slug", which is a url-safe form of the username. If the username contains @ or some other chars then the slug is different.