The current short links outputs ! (and probably other charecters) straight out.

This is not a safe format and can cause broken links.

We should ensure the username is url encoded when displaying it.