how do I include a URL parameter as a hidden form field?