[bug] path was changed but not from reference in secure_path

Also suggesting renaming of secure_path to secure_url to match.