Only accept valid charaters for an unvalidated username

Fix for unwanted characters cannot be used as a username when validateWorkUsername=false.
This does not validate the address itself, just unsure's no stray characters are used.