handle missing acs url better