Limit admin usernames to letters, numbers, underscores

We tried to do that, but apparently we failed!  Our failed check can lead to failures downstream.