add MIN/MAX_USERNAME_LENGTH to context
make MIN/MAX_USERNAME_LENGTH global js variables
check email, also check min/max length
increase rate-limiting a bit, we were getting legitimate user complaints