Fix urls for security tokens