escapes urls with Rack::Utils