Right now only Rob is doing username change requests, which is done in pure SQL directly against the live database.

It would be better and more secure to have a function on the site allowing account administrators to change the username of a given account.