create URL-safe API keys