add unique email constraint on user table, and dao test to verify it