fixes #1049 Escaping # symbol in VFS controller

this doesn't address other Windows legal path characters that are illegal in URL like `%`, `&`, and `+`.