Hide sensitive data in plain sight – in the URL!