make public IDs be url safe