encode all hardcoded ampersands