now require email and require unique username when registering