make sure URLs in todo collection list are legit