Probably because the "&" embedded in a URL address generally means that a variable name and its value are being passed to the back-end web application. To be literally used only as a "&" it has to have HTML code such as "&" or "&" in the URL address to avoid being misinterpreted. So I can see why they wrote the URL address like they did. Programming stuff that only geeks like myself really worry about.