EXPLAINED: CAP-ENABLED URLS AND THEIR FUNCTION, FORMAT, AND SECURITY