collision proof

this makes sure there won't be any username collisions