bugfix in URL decoding