fix url to validation code