validate usernames [#19]