Improve validation of backend_urls

It was allowing through some technically valid, but unwanted values.