add fenci to not authorized path url