restrict username to alpha numeric