allow invited users to set username; validate username format