basic username validation