user update to correct url but now has crsf issue that needs to be fixed