Only allows user's to change their username.
Validates username to prevent HTML injection.
Uses master key to update selections.

This removes the need for users to be able to edit their selections so
that they cannot change their selections outside of the saveTeam
function.