server side username sanitization

for OpenSourceFieldlinguistics/FieldDB#1214