base and authentication urls
functions except url as argument