Added - and * as unauthorized characters too