replace & to &amp;