replace + with %2B to bypass encoding