Use to_url instead of parameterize

to_url will convert '&' to 'and', which seems better than just
dropping it, which is what parameterize does