In future we can add some condition to secure url or not. But now we need to secure all urls by default.