Move kegadmin templates into app dir.
api: accept only alphanumeric usernames.