use full URI instead of login
handle only MESSAGE requests