diff --git a/modules/route/back/methods/route/downloadCmrsZip.js b/modules/route/back/methods/route/downloadCmrsZip.js
index c3379ab82..23fae5ddc 100644
--- a/modules/route/back/methods/route/downloadCmrsZip.js
+++ b/modules/route/back/methods/route/downloadCmrsZip.js
@@ -37,7 +37,6 @@ module.exports = Self => {
     Self.downloadCmrsZip = async function(ctx, ids, options) {
         const models = Self.app.models;
         const myOptions = {};
-        const token = ctx.req.accessToken;
         const zip = new JSZip();
 
         if (typeof options == 'object')
@@ -47,18 +46,20 @@ module.exports = Self => {
         let totalSize = 0;
         ids = ids.split(',');
         try {
-            for (let id of ids) {
+            const baseUrl = (await Self.app.models.Url.getUrl()).replace('#!', 'api');
+
+            for (const id of ids) {
                 if (zipConfig && totalSize > zipConfig.maxSize) throw new UserError('Files are too large');
 
-                const baseUrl = (ctx.req.headers.origin)
-                    ? `${ctx.req.headers.origin}/api`
-                    : `${ctx.req.headers.referer}api`
                 const response = await axios.get(
-                    `${baseUrl}/Routes/${id}/cmr?access_token=${token.id}`, {
+                    `${baseUrl}Routes/${id}/cmr`, {
                     ...myOptions,
+                    headers: {
+                        Authorization: ctx.req.accessToken.id
+                    },
                     responseType: 'arraybuffer',
                 });
-    
+                
                 if (response.headers['content-type'] !== 'application/pdf')
                     throw new UserError(`The response is not a PDF`);