no & encoding in redirect url please