Validate URLs with a HEAD request, not a full GET