Can I suggest not requiring both an email address and a username? Email is already unique.

Also consider scrapping the password confirmation field.

These will reduce signup friction.