test that username with starting underscore is not allowed