more robust URL construction: works even if /xmlrpc is forgotten