reject usernames that are too long