Gaurd against pip urls in package names

Restrict pip resource name to package names.
Add examples of using VCS checkout of pip packages using the
 url parameter.