user table: username is primary key