sanity check username in hideUsername