Improved URL validation

Although we don't check the supplied URL thoroughly, we should make sure that it _begins_ with either http:// or https:// instead of checking if it _contains_ http:// or https://.