Note on username validation
CAS works, could be prettier