was trying to CGI.escape array; fixed to escape string instead