we don't need to escape the parameters
convert tests to specs to be able to disable them in plugins
Merge pull request #1074 from opf/fix/back_url_verification