username must be unique but is not required