Escape ampersands in URL (whoops)