If you use only POST method, instead of GET, you'll hide the arguments.But you'll need to forbid the GET calls to prevent users from typing theURL themselves.