disallowing ftp urls