username attribute may not be the unique key for User