better url
better encryption?