API: Don't allow dots in URL segments