Decode url param before explode()

entityreference_prepopulate_get_values_from_url() should decode the $_GET param before trying to explode on ","

rationale:
drupal_goto automatically encodes comma ( "," ), so it's impossible to properly send a user to a path that can be interpreted by entityreference_prepopulate_get_values_from_url()