Disallow usernames with less than 3 characters

cf. #1144