change urls for new rest security