switched to query object for updates
leaking characters from this bucket
switched to query object for delete's and url escaped the stuff