username and pw length validation