Entering incorrect usernames in project/settings is (1) allowed and (2) can break the project

[r03ert0]

For example, a username was entered including a '@' symbol at the beginning.

The expected behaviour should be that no incorrect usernames are allowed at the level of the browser, and also validated in the server, and refused if wrong.