configurable url and secret