href attribute's setter for URL objects was bogus (ended up overwriting object state in failure case)