Use a more sensible message for the AbuseReport uniqueness validation

Previously it was "user has already been taken", when really we were saying the user has already been reported.