deref AllowedUrl
My first try at having PlainUrl(AllowedUrl) etc failed :)
These are a couple of patches I salvaged from the branch... I am not even sure if using Deref is cool or if it is an anti pattern, if you think the latter feel free to drop this