fix #391 : change URL to find userkey