fixes validation bug allowing @ in usernames