check for empty username in create user is more general now