enhanced url validation