turns out we never exposed the ability to specify the custom URL.

So no backward compatibility provision is needed.
Also in this change, I stopped exposin the password. See the code comment for more details