Input validation for creating a new user

All fields are protected with whitelisted regular expressions, in
addition to length checks.