allow usernames with length 3 or more for login