add box-services
fix username permitted chars