added username restriction