XSS corrected

% replaced by %25
Use of session to propagate original search.