pub fn sanitize_username(username: &str) -> Result<String>
Sanitize username to prevent injection attacks