Add validation for slugs

- don't allow anything but chars, digits, -_