as the direct request, no encoding on the ampersand (&) the request goes through fine, unfortunately this isn't do-able within an email link and I would expect the encoded version of this link to work ...