in contrib/auth/management/commands/createsuperuser.py:14

RE_VALID_USERNAME = re.compile('[\w.@+-]+$')

\w breaks down to the abovementioned pattern, according to: http://docs.python.org/2/library/re.html

So, there's a few extra characters.