Disallow @ sign in usernames