improve boundary matching for autolinking urls and @-names

this should close out #20