validate username on input