in security.js we have also to set this same url, just the endpoint is different, could we not use the same variable (at a single place)  for the base URL ?