use restricted vs public urls in configuration