add minimum length validation for usernames