/status and /rescan in http api, remove any dashes in api key strings