now only accepting NFC-normalized URLs, and redirecting otherwise