lots of bugfixes reagrding usernames, validation, and auth