username must match regex /^[a-z0-9_\-]{4,20}$/