validate username before creating user object