by Dave Reid: Tokens should not be sanitized as modules that call format_username() are responsible for sanitization.