create account: validate that "username" is a valid email. #28