accounts: check username valid