ensure usernames are unique