We have created a external_id mixin applied to lead model in order to expose a public url based on this external_id value (hash built from numeric id)
Using this we avoid having a numerical id on the url that can be substituted by any random number in order to obtain or use forms not related to a user.
