Check the path for disallowed characters

- clean some tests against the changed taken e-mail check
- check disallowed characters (configurable)