a little username/email sanitization