edit url
 remove passwd