Use secure_filename on the title GET parameter

Avoids issues with non-ASCII characters in video titels
and makes the URL more readable in MPD clients