likely using a urlX counter in the parameters will be the solution
Please don't; JSON has nice shiny arrays for that sort of thing.
then spaces in passwords and @ in usernames is not an issue ;-P
OK, I'll bite: Passwords with colons in them, anyone? :-P
The best string to parse is one which you don't need to parse at all.