adjusted url for api security