url encoding still wrong