change url to manage rest security