we need to validate all user input. if we need to use localhost, then we need to add : to the valid regex maybe?