allow url_protected to accept s3 urls