web/username_prefix.php: don't remove @ from query string because that is no longer a special character