Fix potential security issue if org id is "root"

circle/dashboard/store_api.py

@@ -56,7 +56,7 @@ class Store(object):
             raise NoStoreException
         if not user.profile.org_id:
             raise NoOrgIdException
-        self.username = user.profile.org_id
+        self.username = 'u-%s' % user.profile.org_id
         self.request_args = {'verify': settings.STORE_VERIFY_SSL}
         if settings.STORE_SSL_AUTH:
             self.request_args['cert'] = (settings.STORE_CLIENT_CERT,