make handlers return 404 on non-alphanumeric ids.

fixes #67, once more with feeling.