prevent user creation with empty username