add validation format for username & change url to username instead of user_id