#158 Removed redundant URL decode step in SecuredHost.secured()