why do we silently strip spaces from usernames? shouldn't we error instead? ditto if the target has a space.. this is an API with a guy in front, in what circumstance are strings with spaces happening, and why isn't it just an error?