Documentation incorrect for `POST /auth/changeusername`

[Eldemarkki]

The API spec says that POST /auth/changeusername returns status 403 if username is taken, but in reality it returns 409. We should change the docs to say it returns 409 in those cases.