fix adding stamp_secret to url