alter validateCallbackURLOrThrow