username validation moved to \valid