guard against pathless urls