Blacklist for usernames, display names and collection names (bug 1024630)

WiP: I still need to test the admin part.
I've seen quite a few uses of `assert` in the tests, don't you think it would read better?