allow usernames with 4 chars