Finally works out. I hide it successfully after correct the mistyping issue(this one does cost me some time to find out). so now the url shows like:
http://test.asp
<FORM name=myform action="test.asp">
<input type="hidden" name="username" value="&test&">
</form>
then use document.myform.submit()
Thanks a lot for your kindly suggestion