Allow injecting hidden values into URL

[unibrew]

An example use case of this feature would be API key which needs to be added to the URL and still should not be shared in public.