sql works // username length restriction to be done