escape the '&' used to join the query string. Now passed html validation.