fixed: auto generation of username now always makes valid usernames