use the tiny_path as the id, so the ids aren't guessable