git/http transports: do more project name validation