Unless you never plan to delete users, having an actual FK relationship is bad, as no matter what table its in, you now either cannot delete users, or have incomplete history. I simply record the username and link at run-time based on that. That way I can delete users and still maintain 100% complete Audit Logging which is very important for the financial applications we write.
-Katerina