username check

[bbengfort]

Usernames cannot be names of urls (e.g. admin or create) because we connect urls directly to the website like in Github or Twitter.

On create/update we should check this to make sure we invalidate these user names.

Also - perhaps we shouldn't allow the user to change their own username?

[bbengfort]

Along those lines, username and orgname should be unique together!