Specifically, only allow alphabetical, numbers, _@- and period. The website it self handles "advanced" characters just fine, but all systems integrated through community authentication does not.