Added user name validation to prevent XSS.