tested for duplicate user creation