fixed up url validation