``protected_url`` is not needed here