add URL validation