make personaUrl config format stricter

fixes #72 

Reasoning: `https://login.anosrep.org/` was accidentally used in staging, and the server started up with no problems. However, it breaks CSP (the trailing slash), and makes our requests for auth and provisioning apis to use 2 slashes.