disallows debugging URL if key is empty

fixes #2303