Fix username validation to allow periods and hyphens