initial working steal template
updated to support providing stealUrl