usernames must now be unique (TESTED); find returns null instead of throwing NoResultException