the weird thing is, i've avoided the ampersand escape issue previously by sending in a JSON object. that has always worked, but not this time.