don't accept empty usernames.