enforce URL uniqueness at the application level