Add error messaging & filename restrictions for new files

In particular, prevent ampersands.