decode the url params we get; permit more urls