Is this the same regexp that Django uses? If so, we should add a comment above this saying, "yo! this is the same regexp django uses. need to keep the two validation implementations the same."