configure secured urls