The second part of this message is really the hint -- either make sure your auth backend can handle non-unique usernames, or make the username field unique.