271 feature username validation

The only weirdness here is that I changed the route registration for static assets because it conflicts with the horus upgrade, which adds its own static assets under the "static" route.