add validation for username