change from server-side URL parameters to client-side for security
Merge pull request #3 from xively/master

pull from master