URL and cookie safe UIDs