updates all urls to use url_for