has to start with http or https