user and role names are forced to be unique