add new 'flags_bitmask' field to 'authorized_urls' table