enforce alpha-numeric on username wildcard