include note on http validation, dry up create_short_url method