Auth users by username rather than email
Enforce users having unique usernames
To do list