curl escape characters in header