user: accept - and + on username

Fix #87.