Fix #447. Update username validation to only disallow %.