update  url authorization