refactored url access and misconfig