The '&' is the address-of operator, but what they're doing is sending the string by a const reference. The const prevents modification, and sending it by reference avoids creating a copy of the string.
Sending a parameter by value (without the reference) will send a copy of the argument (assuming a copy constructor is available). Sending a parameter by reference will send the original object itself as the parameter instead of a copy. Using const ensures it will not be modified.