Remove hard-coded path by using url_for()