Restrict username to letters and numbers only, otherwise share URL might break.