fixed unit test

the username check now behaves as the docs say. Eg. the configured
number of characters is still allowed, only more than the chars are bad.
The test did not reflect that