add uid and passord to url