don't pass url to verify. just only current url.
fix run permission verify