No username validation on registration....

[vlbee]

... meaning you can register multiple times with the same username. Consider making this a UNIQUE field in your database as a start :)

CREATE TABLE users (
    id SERIAL PRIMARY KEY,
    username VARCHAR(100) NOT NULL UNIQUE,
    is_admin BOOLEAN NOT NULL,
    pass VARCHAR(100) NOT NULL,
    email VARCHAR(100) NOT NULL
);