use secure token encrypted for location search, ignore query if token is valid
add support for url encoding in the api for complex queries