don't allow duplicate login names