Changed $username from cookie to session variable.