moved url decoding to request