escaped uris are now expected as request params