alter secret_url