Set up non-CAS protected URL