authorization, URL format fix