changed querystring parameter securityToken to hash parameter to allow remove from url on home.html