fix encoded URL issue + security related settings
Merge pull request #1 from AMorgaut/master

fix encoded URL issue + security related settings