security fix: prevent users from signing up the same shift twice