urlselect: use hook_process instead of io.popen

forgot that opening process manually is verboten