core_sanitize_username() allowed username chars: A-Z a-z 0-9 . - _