names: tighten up the requirements for project and user names