Blacklist for usernames, display names and collection names (bug 1024630)

WiP: I still need to test the admin part.
It's `name`, not `user`