Fixed a bug where usernames were allowed to contain -, but urls.py didn't accept it.