Also, `on: :create` makes this validation only take effect when creating a new bookmark -- we would still be able to update a bookmark with an invalid URL after we created it.