fix authorization and url