scrub usernames of non-alphanumerics