Removed credentials from getURL for non-api calls.