Add instawallet style URLS only safely.

You can now create a URL with your secret key. The secret key is never passed to the server as it is a # in the URL.

See http://stackoverflow.com/questions/3664257/why-the-hash-part-of-the-url-is-not-in-the-server-side for an example.