UserValidator - AllowOnlyAlphanumericUserNames allows usernames that aren't alphanumeric

[mshindal]

The AllowOnlyAlphanumericUserNames option is supposed to only allow usernames that are made up of letters or digits. However, as you can see in the regex check here, it still allows usernames with @, _, or ..