using deploy URL /protected/