I don't have a lot of experience in web dev so I am not sure what you can do to 'protect the url' but among other things you'd have to synchronize your authentication system with Permissions
of that CloudCDF.
Maybe there is a simpler way, I would love to see an example.