29: forbid hash and dash inside WORD token