Usernames: allow, require, or forbid users to user their email address as a username?