subdomain validations

- require subdomain to be 3 characters or greater
- add disallowed subdomain array
- ensure subdomain is unique (Rails validation and DB unique index)