Only allow alphabetic (and '-') characters in header id

@kylef I think this is what we're looking for