UP-3689:  Allow users to deep link to protected content without using refUrl