reject ambiguous usernames