added username validation to /sign-up server side