modified url check to accommodate url-encoded username and password