Use url_for instead of hard-coding urls