routes/users.js: check for duplicates before POST.