exclude forbidden caracters for login