Which is my point about the safety of URLs... If a user is authenticating to your site, why not use a session to track whether or not they are authenticated?
Dynamic URLs? Maybe.
[Edit: When I say "dynamic", I mean dynamic to the current session, as you would see in a continuation based framework. I do not mean dynamic as it relates to a piece of data.]