Currently only information about the user in identify response is username. This is problematic because usernames can be changed (https://en.wikipedia.org/wiki/Wikipedia:Username_policy#Changing_your_username). So it is impossible to track users as they are changing usernames. Can you expose some unique non-changing ID? Probably SQL table has an ID for user row?
Version: unspecified
Severity: normal