fix: Don't count users to generate user names.
We must attempt to generate unique user names. This new approach re-uses the secret codes as usernames, which should be OK because a collision is very unlikely and nobody ever gets to see them, either.
We must attempt to generate unique user names. This new approach re-uses the secret codes as usernames, which should be OK because a collision is very unlikely and nobody ever gets to see them, either.