Add validation of user/room parameters

These should be short alphanumeric strings (with a few special
chars allowed for rooms).