spec: modify validation for username attribute