make sure usernames are unique and only alphanumeric