sorting url params. check secret param