prevent users from creating usernames with special characters and fix all old usernames