Yea, I'm wondering if it's actually safe to use URLs instead of authentication.. I guess not
Dynamic URLs? Maybe.
[Edit: When I say "dynamic", I mean dynamic to the current session, as you would see in a continuation based framework. I do not mean dynamic as it relates to a piece of data.]