refs#75 url security settings set