Escape '&' in URLs. Added unit tests for prev_url, next_url, create_event_url.