UserRepository: expanded specification: duplicate email and username insertions should throw exceptions.