bug fix: a user now can't add himself