add authority for authorization on urls