Don't allow hash signs in usernames