Changing `r+` to `r` on url_stat

url_stat doesn't need write permissions