Relax URI validation.

URIs are no longer validated against a scheme by default. This allows
usage of path only URI for example. To validate against a scheme or
authority `url-authority` and `url-schemes` can be used.
I had the feeling that a global list of arbitrary invalid URLs is not that useful, because usually you want to test against a specific class of invalid URLs. anyway move into a var now.