Update url_prefix text and add a security disclaimer.