#927 Hidden urls for secured content