properly unescape query string