username cleaning is now overridable