Deal with ids that contain slashes

The base64 encoding that is used for ids does not play nicely with the HTTP
route matching unless a regex is specified.
Excellent choice; IDs are fixed-length and base64url should do great there. :)