user creation - do not allow spaces