Previously PHP was escaping things like ampersands, which then caused us to have broken URLs. These aren't displayed anywhere in the UI, so no need to encode them anywhere. Closes #314.
