* update labels on all forms
* add validator for username registration (letter followed by alphanumerics)
* allow @domain suffix for username login
* move DEBUG_ALL_ACCESS logic to the right place (and apply only to inactive limits)