add url encode for password