escaping hashtags in download hrefs