Updated server-side URL validation + unit tests