allow non-numeric chars after and before track no

for track number sanitation check
fix so our server.max_request_body_size value is actually used :/

dont know if it ever worked with our ssl_server but it at least broke
when we used our "custom" server instance instead of the default
cherrypy one....