CDB-4001 Fix username validation: don't allow dots

Also: check it starts and ends with alpha-numeric chars