"Navigate to" should explicitly check the "url" property is a string

At the moment the validation step is:

> If url is not an absolute URL or is not an absolute URL with fragment or not a local scheme, return error with error code invalid argument.

We should explicit check that it's a string, in case anyone does anything with `toString` or `valueOf` in an object.