ensuring url-encode parameters are escaped properly