handle urls with username and password