add more tests, require username param when adding user