I wonder if we should add something like a `valid_scheme` attribute to `URLValidator` in case someone is subclassing it and changing `regex` to remove 'http'