Update user.js

Usernames can only be a-zA-Z0-9