don’t show “it will be yours” on 404 page if package name is invalid

Because this happened: https://twitter.com/heftybyte/status/544484918118866944

This patch adds tests. Ready for merge.