Avoid duplicate User->username in controller

fixes #515

Additional checks in `UserController.php` to prevent addition or editing *(via POST forgery)* User with same `username` as existing one. Also added I18n string to `en-message.php` only