fix url helper
password authentication