url validation works