drop target URLs that return 4xx; we don't expect retrying to help

fixes #24