- add switch to disable URL validation in login mask