added password with not safe url chars