allow unicode in usernames

undefined codepoints are allowed, but whitespace is not.