added security for asset url