SECURE_API_URL fixed