changed & to &amp; in url for validation