added /course/ to non anonymous urls (auth)