new design, added url encoding and sha-1