encode ampersand etc in the url