update koreader-base url to avoid permission deny