securing the EncounterSetSubmitterID URL