making username&email unique, admin false by default.