added more sacurity

now a when creating a user, the fields are checked for the appropriate
length. usernames must not be already taken