hateoas url is the website but it requires ssl authentication (like portal_slap), while the slapos_master_web_url is the website the user is accessing (no ssl authentication required).