Fix security issue with posted website URL

Added URL sanitizing and validation

to prevent submitted URLs similar to:

```html
http://nauthy-url.com/"><script>alert(document.cookie)</script>
```

++ fix wrong `http://` default'ed value when no website URL was submitted since now `osc_validate_url` does the job