[javascript] URL encode sees “&” (ampersand) as “&” HTML entity