fix backend url when secret key is set in admin area