access limitation to site, repair validate in User model - username