better regex for making safe test cookie names