only checks username once