validate display name ( should not have '@', etc. )