add missing semicolons
reject requests that contain invalid user names :)