Is the URL paramater the only option to prepopulate hidden fields?