more URL validation changes #166