dont accept invalid characters in username. fixes #1