added client-side url encryption