better user username and follower constraints on update
add an optional password to the profile page