fixes #8597 - friendly ID should escape slashes for URL parameters

annoyingly, controller tests don't actually use http requests, so the test I wrote did not fail for name with slashes in it (and actually did fail for name with escaped slashes)
any insight on how to test this would be great.