addresses #120 (URL percent decode / sanitize)