don't we need to url-encode the param we're swapping in here?