I kind of want the returned JSON error to have something better we can check against in consumers other than just `username given in X is valid and being in use`.

Same goes for the blacklisted error.