only hashing URI, not full URL