Add a unique index on session:username to safely enforce unique usernames. Includes tests.