* updated validations and migration bc the default devise-token-auth doesn't assign a username, but i still want them