Disallow problematic characters in app ids. Fixes #46