Giving away your user ID is fine, but you should not give people random URLs that they ask for. Some URLs contain session IDs that can (I think) be used for evil purposes.