The command curl "https://screeps.com/api/user/memory?_token=***&shard=shard3" works perfectly fine for me. The issue is likely that you don't have quotes around the URL. This would cause the & to break it into two separate commands.