model stuff urls and authentication