make either an obvious error that username inputs can't contain spaces (or allow to enter disregarding them)
✅ set the minimum number of symbols (password criteria)
✅ make proper redirections if login/signup routes are being accessed when user is already logged in