typo fix in protected URL path