more valgrind indicated fixes
urldecode post values