How can I include ? and & within a parameter being passed in a URL