prevents username duplicates. TODO: sanitize input!! very important!!