the regexp alone and web browsers allows URLs to contain non-ASCII
characters, which `URI.parse` does not like -- resulting in the inbox
page to suddenly break.
also changed the `redirect_to` in the controller to a `render :edit` so
that validation errors are shown properly