add clean_password & clean_username