use a hash for urlSafe