Escape autocompletion terms before passing them on to the request

Otherwise queries like "a&b" are translated into a request URL like this:
http://.../autocomplete/term=a&b&...