#8 Validate tags (and decide what a "valid" tag is)

Because things like `/` mean something else in terms of tags, it'd be nice to make sure that tags submitted are valid. Probably `[A-Za-z0-9_-]+` is safe, but it'd be nice to allow Unicode tags as well.