allow dots in filenames

the minimal example, which tries to store /notes/note.txt failed with restore, which returned 400 Bad Request.

there may also be other cases where this breaks.

This change may open a security hole with "../" in the path, didn't check :)