Blacklist for usernames, display names and collection names (bug 1024630)

WiP: I still need to test the admin part.
why not using `clean_names` instead?