username has always been used in the URL, we have no plans of changing this as it would break many well established URL's.
What sort of spam are you encountering? through the join form or reviews? what spam prevention methods do you have enabled? (security questions, captcha, recaptcha...