fix for bug in TempUrl()
fixed secret string