added missing '&' for URL construction