Add check password doesn't contain username