invalid user or url