Add redirects for refcodes.
Require that refocdes only contain 0-9, A-Z, a-z, -, or _.