Add more validation to tag endpoint

[emmettmcdow]

As of right now, you can put any string as the tag using the http://controller/tag endpoint. This is a problem. We need to restrict it somehow. Let's say for now we just want no more than 64 characters of alphanumerals. So the equivalent of [\w_-]*.