Add AllowURLSchemeWithCustomPolicy() to allow external fine grain control over allowed URLs.

Closes #6.

- Fix typo "schems" -> "schemes" in docs for AllowURLSchemes.
- Don't make urlPolicy type exported to keep public API bloat minimum.

Feedback absolutely welcome, I am open for changes. Let me know what you think.