insert iframe dynamically to deal with encoding the URL correctly