The URL pattern erroneously had two '([^/?#]+)' capture groups, which would split any username into 'usernam' for the first group and 'e' for the ignored second group.
The URL pattern erroneously had two '([^/?#]+)' capture groups, which would split any username into 'usernam' for the first group and 'e' for the ignored second group.