Blog#url allows http and https only