CASC-224 Replace URL with String to remain compatible with Spring Security