add username max length validation