Replace & with &amp in a few urls

This should help with validation.