enforce uniqueness of username

Dammit DRF you should be doing this.