I love it. If possible, as an optional flag, can the real URL never be exposed and password protected? Sharing the real URL could be an issue.