forbid whitespace in username