Validate username & password lengths