core: using website instead of api(?) & add authorizatation on fut
urls: update & cleanup