<sid> should only be allowed at start of name