replace any calls to urldecode() with rawurldecode() since the former erroneously replaces + with blank space. refs #3632