don't allow signup action to overwrite existing username.