fix for url handler pinlock bypass