mocks for auth
hint for shortpath update
use url functions