use rawurlencode to fix 1073
allow moving into dirs with + chars
Group name does't need to be sanitized before storing it in the database

It should only be sanitized before display