fix username change form that was allowing illegal usernames