prevent duplicate users in createUser()