Permit dot in :id param of user routes (fixes #338)