improve URL validation