URL escape shortname in repository SELECT

Before this fix, a repository shortname such as "a&b" meant that
the user would be forwarded to /branches?repository=a&b and Critic
would say "No such repository: a". Same problem existed for shortname
"a#b". Also shortname "a+b" hit the error "No such repository: a b".