add a shared key which needs to be passed in the URL to improve
security with spotlight