Prevent duplicate nicknames
Change authentication, use header Authorization instead of query string