setting to right url for second xss test