validate url should also be private static