Add constraint to InstanceUser to prevent duplicates

Also adds a data migration to remove any duplicates that snuck in.
Users should only have one InstanceUser per Instance.