Update to URL security

There was a flaw with URLs that had bad characters in them