keep names from being crazy long
package names must be shorter than 512 chars
temporary debugging of user name checking in package vdu
fix vdu so old non-SemVer2 versions dont' cause problems
should throw 'forbidden', not 'unauthorized'
removing a readme from a version is allowed