some sanity checking for urls