Added validation on username to cancel out a possible ldap injection