allow secure url and move email address to command