allow hyphens and underscores in form urls