changed authentication in request url