Validating ID number and username against 'database'