This kind of URL is called a "capabilities URL" in security circles.  It's a common pattern, and often considered more secure than username/password pairs, thou

This kind of URL is called a "capabilities URL" in security circles.  It's a common pattern, and often considered more secure than username/password pairs, though its security depends on how the user protects it. You can find more details here: http://en.wikipedia.org/wiki/Capability-based_security http://en.wikipedia.org/wiki/Capability-based_security