more URL validation