Add check for forbidden char sequences in validate_username().