broke the protected url -- easier ot curl test