stop using unnecessary validators for signin

The only thing that matters is whether the username/password
combination is correct. There is no reason to enforce the length
requirements here.
validate the characters in usernames
upgrade horus and hem
compare usernames with dots ignored