// common constants, shared between multiple pieces of code (and likely client and server)
function d(name, value) {
  Object.defineProperty(module.exports, name,
      { value: value
      , enumerable: true
      })
}

d('USERNAME_PATTERN', /^[A-Za-z0-9`~!$^&*()[\]\-_+=<>]+$/)
d('USERNAME_MINLENGTH', 3)
d('USERNAME_MAXLENGTH', 24) // TODO(tec27): rooted in BW's limitations, maybe we should rethink it

d('PASSWORD_MINLENGTH', 6)

@@ -269,10 +269,11 @@
 -_+=
-%3C%3E
+.%7B%7D
 %5D+$/
@@ -329,82 +329,11 @@
 H', 
-24) // TODO(tec27): rooted in BW's limitations, maybe we should rethink it
+16)
 %0A%0Ad(

Update username format limitations.