validate all url parameters better