protect uri delimiters & and ; by encoding them into |!| (yeah, ugly), transfer current cookie information (to enable single sign-on)