url rewriter fix for SSO