seal app tight (added urls)