Don't allow "create" as a site name.
Get client validations working better.

Don't allow "_" as a site name either.