Add validation of Return/Cancel URL's (with test cases)