invite codes use-once only
actually check username uniqueness. holy shit alex