protect short url generation