prevent registration with empty username and password