add check on duplicate username or email address