negate username checks properly