use _path over _url as much as possible (for ssl purpose)