there's a variety of reasons why you don't want a visitor to be able to guess URLs, or take a URL and guess a sequential ID from it