fix bug on usernames

usernames can contain (A-Za-z0-9!-_.& ) at the very least. Probably
easier just to do a greedy regex instead of trying to come up with all
characters