Fix URL permission (now requires trailing /)