bug fix: check_username() was never called