What are the Discourse rules for usernames?

No, it is not possible to use & or ' in a username. If a user attempts to signup for a Discourse site with one of those characters in their username, they will see the following message ( must only include numbers, letters, dashes, dots, and underscores):