fixed tag field widget and url pattern to ensure safe url