validates url as image file