url encode special characters in form data