add a few missing protected urls