Added security by changing passing of the variable in the url to a cookie that reside on the browser itself. The cookie is deleted anytime the application quits or completes a double of single punch