add url authenticate