made the url encoded for security also added a security origin feature