added the # to the allowed characters so you can use urls with anchors in them