FIX: removed client side URL validation