Restricted username to <= 25 characters, no "?" in name and added some overkill encoding in safetify for input encoding.