add other options for secure_url to pass into url_for