Disallow usernames with less than 3 characters

cf. WoltLab/WCF#1144